A heap buffer overflow vulnerability exists in JSON::XS for Perl versions from 3.04 before 4.05. The flaw occurs during incremental parsing (incr_parse) when appending a one-byte chunk, causing a one-byte write past the allocated heap buffer due to improper buffer size management.